Add remaining public + admin pages (parallel build, 26 files)

Built via two parallel agent workflows reading the real Prisma schema, then
integrated + verified.

Public: /shop (categories + storefront), /community hub, /rankings (top by
credits), /staff, /photos (camera_web gallery), /help (categories + rules),
/help/tickets (auth-gated user tickets + create), /settings (auth-gated, update
motto via RCON).

Admin: /admin/catalog (+[id] items), /admin/radio (shouts/apps/schedules +
delete shout), /admin/teams (CRUD), /admin/permissions (read), /admin/wordfilter
(CRUD + RCON push), /admin/ip (whitelist/blacklist CRUD), /admin/applications
(list + dismiss), /admin/logs (chat/command/alert read), /admin/achievements
(read). Server actions all staff-gated.

Header + admin nav extended. Verified: tsc exit 0, vitest 48/48, next build
exit 0 (33 routes); curl-probed every route — public 200/<main>, auth+admin
correctly 307-redirect when unauthorized.

src/app/rankings/page.tsx

@@ -0,0 +1,80 @@
+import Link from "next/link";
+import { avatarImageUrl } from "@/lib/format";
+import { prisma } from "@/lib/prisma";
+import { siteSettings } from "@/lib/services/site-settings";
+
+export const dynamic = "force-dynamic";
+
+type TopUser = {
+  username: string;
+  look: string;
+  credits: number;
+  rank: number;
+};
+
+export default async function RankingsPage() {
+  let users: TopUser[] = [];
+  try {
+    users = await prisma.user.findMany({
+      select: { username: true, look: true, credits: true, rank: true },
+      orderBy: { credits: "desc" },
+      take: 12,
+    });
+  } catch {
+    users = [];
+  }
+
+  const imagerBase = await siteSettings.get(
+    "habbo_imaging_url",
+    "https://www.habbo.com/habbo-imaging/avatarimage",
+  );
+
+  return (
+    <main>
+      <div className="hero">
+        <h1 style={{ margin: "0 0 0.35rem" }}>Rankings</h1>
+        <p className="muted" style={{ margin: 0 }}>
+          The top 12 players ranked by credits.
+        </p>
+      </div>
+
+      {users.length === 0 ? (
+        <p className="muted">No players to rank yet.</p>
+      ) : (
+        <div className="grid cols-3">
+          {users.map((u, i) => {
+            const avatar = avatarImageUrl(imagerBase ?? "", u.look, { size: "m" });
+            return (
+              <div
+                key={u.username}
+                className="card hover"
+                style={{ display: "flex", gap: "1rem", alignItems: "center" }}
+              >
+                <span style={{ fontSize: "1.5rem", fontWeight: 800, minWidth: "2rem" }}>
+                  #{i + 1}
+                </span>
+                {/* eslint-disable-next-line @next/next/no-img-element */}
+                <img
+                  className="avatar"
+                  src={avatar}
+                  alt={`${u.username} avatar`}
+                  width={64}
+                  height={110}
+                />
+                <div style={{ minWidth: 0 }}>
+                  <h3 style={{ margin: "0 0 0.2rem" }}>
+                    <Link href={`/u/${u.username}`}>{u.username}</Link>
+                  </h3>
+                  <p className="currency" style={{ margin: 0 }}>
+                    <span className="coin credits">c</span>
+                    {u.credits.toLocaleString()}
+                  </p>
+                </div>
+              </div>
+            );
+          })}
+        </div>
+      )}
+    </main>
+  );
+}